Book123

    Free register and download UseNet downloader, then you can FREE Download from UseNet.

    Download without Limit " Free PDF: Worm Defense and Quarantine Research Formal Models and Simulation " from UseNet for FREE!

Background! Part of EMIST/DETERproject! EMIST (Evaluation Me thodsfor Internet Security Technology) & 8220;Develop thorough, realistic, and scientifically rigorous testing frameworks and methodologies for particular classes of network attacks and defense mechanisms.& 8221;! Funded by NSFandDHS Worm DefenseStrate gies Highlights of ongoing mal code defense research Resource Limitation De lay worm prop aga ti on through the limiting of resources that aggressive worms consume(William son 2002, Staniford 2004, Wongetal. 2004) Leap- & 8230;

Formal Methods Approach Model Checking of Worm Defense 1. Express qua ran tine (and other proper ties) as logical formula 2. Evaluate model of worm de fenseundertheses pecifications Model (Finite State Machine) & 038; Initial State Properties (Linear Temporal Logic) - Worm Propagation - Worm Defense - Initially one infected - Quarantine Definitions - Others: validation, can defense win? Model Checker proved or counter example (or out-of-memory) & 8230; Experimental Results Quarantine under group-based defense and scanning worm wit harbitrarypropagat ion 1. Quarantine property does not hold: Defense cannot achieve qua ran tine in every scenario 2. Model checking negation of quarantine: Counterexample =scenario in which quarantine achieved 1 t 1 3 2 a a i 1 t 2 3 2 a a 1 t 3 3 2 1 t 4 3 2 2 : infected : uninfected : filtering a i : alert : infection (only shown when uninfected target) i a a a a Figure: Example when& 8221;Weak Quarantine& 8221;holds ( r =2, G =3) .. Simulation Parameters ! 100 LANs, each: 1 egress route rand 10 vulnerable end hosts ! Random scanning UDP worm in address space 0 .. 216 & 8216; 1 with 3wormspeeds: ! 10 (low speed), ! 100 (medium speed), and ! 1000 (high speed) scans per sec ond ! Worm defense: ! rate limit=10 di!er ent (external) IPspersecond ! group size=10 and alert severity s =3 ! alert threshold ! =6 , 9 , 12 , 15 ! Max. simulated time 200 seconds and 100 re pe atedruns

Buy It at Lowest Price on Amazon

Worm Defense and Quarantine Research Formal Models and Simulation.Pdf

Rating:
2.5 out of 5 by Book123